$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: ZDuxlSUapZiWPS2HGfhWdsk6tqtX3hSPh1u/Dk/PIG0= Subject key identifier: 64:4B:D9:13:84:96:7B:13:FF:61:25:88:8A:8D:4B:D5:22:05:BA:26 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D386A5BA6AB63B6ED99B062C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:5b:a6:ab:63:b6:ed:99:b0:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=399da4eb-5d11-471f-92f5-43c9a8bf9af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:c3:a3:89:46:b9:58:8c:71:e2:9e:a7:fd: d8:79:0f:70:44:d2:bf:d7:5c:8d:98:91:8c:7a:f3: 11:2e:fa:f1:2f:08:f6:fb:e3:df:f9:79:90:80:7c: a6:73:24:b6:ce:50:97:40:30:92:6c:ab:23:da:4d: 88:87:94:c2:63:11:f8:a8:a8:22:53:7f:fd:38:1b: 36:d5:8a:ae:85:c3:c7:a8:90:cc:74:9e:07:32:bb: 97:6f:8f:de:71:0a:27:d2:b1:ea:20:76:81:02:d4: 73:5c:e8:c6:da:43:e1:27:68:b3:0a:1c:80:c0:5f: b2:c2:cb:88:b7:b8:b0:c3:76:6e:60:ce:2e:d4:03: f3:2f:74:6d:be:ab:98:25:d4:68:f9:9f:b4:e7:ff: 52:67:5d:54:30:34:3b:a7:fb:2d:a6:ac:c9:51:a4: 1c:a8:cb:75:e3:32:1f:46:5c:e3:68:44:b7:d8:82: da:5c:2b:59:c1:41:66:ee:83:47:94:f6:56:11:e3: ce:42:71:c4:67:ee:66:c6:b9:a2:73:32:1d:60:61: 30:02:14:4e:4a:6a:f0:57:13:09:2b:55:c5:ac:3a: 05:74:a1:6e:36:83:06:c9:83:23:0e:b8:2b:23:3d: 8e:15:dc:d7:d4:08:ef:f2:15:78:a6:54:c5:a0:b9: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:D9:13:84:96:7B:13:FF:61:25:88:8A:8D:4B:D5:22:05:BA:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a0:9a:e5:72:91:c5:06:f7:77:96:be:6a:a3:e8:65:c4:e5: a2:c4:a2:a5:19:60:6f:ed:66:90:53:0b:81:a4:ac:29:63:8a: 26:0f:34:70:36:cb:82:41:b3:36:f8:6f:5c:af:6d:b1:87:29: 7e:f3:af:60:0a:57:3f:59:04:59:78:7b:3c:0c:60:95:a0:c4: 8b:1c:aa:4a:e7:f5:54:8c:a2:c1:e6:63:27:1e:d1:d3:b3:33: a5:f8:49:b7:68:f9:05:b8:a0:2d:bc:c0:5d:bf:b7:f7:11:20: 25:4c:d2:e2:01:b0:d7:ee:7e:60:7d:07:28:21:17:00:ac:ab: 88:65:a0:7b:c3:a7:d5:6c:57:f3:f9:d3:5c:be:49:b2:a8:3e: c1:3b:5b:b0:a9:1c:2c:77:79:80:95:77:1a:79:6f:00:48:fe: e6:c0:9f:75:5d:25:1c:3c:8c:5a:08:c3:e7:ea:d9:f0:ac:41: dc:9b:ad:18:c3:17:2d:59:f3:87:ac:9e:98:21:b0:28:14:8d: 60:eb:ad:31:df:b3:d8:51:e9:07:2c:89:a5:ab:5d:cf:8d:6d: 51:45:88:4f:64:27:f7:59:71:89:18:d4:e1:d8:d2:58:fe:2f: 0b:13:c4:4c:db:a1:7b:fe:0f:12:ea:74:7f:48:3c:84:4b:bd: c0:1e:a9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alumq2O27ZmwYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk Mzk5ZGE0ZWItNWQxMS00NzFmLTkyZjUtNDNjOWE4YmY5YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1crDo4lGuViMceKep/3YeQ9wRNK/11yNmJGM evMRLvrxLwj2++Pf+XmQgHymcyS2zlCXQDCSbKsj2k2Ih5TCYxH4qKgiU3/9OBs2 1YquhcPHqJDMdJ4HMruXb4/ecQon0rHqIHaBAtRzXOjG2kPhJ2izChyAwF+ywsuI t7iww3ZuYM4u1APzL3RtvquYJdRo+Z+05/9SZ11UMDQ7p/stpqzJUaQcqMt14zIf RlzjaES32ILaXCtZwUFm7oNHlPZWEePOQnHEZ+5mxrmiczIdYGEwAhROSmrwVxMJ K1XFrDoFdKFuNoMGyYMjDrgrIz2OFdzX1Ajv8hV4plTFoLlr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRL2ROElnsT/2EliIqNS9UiBbomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmgmuVykcUG93eWvmqj6GXE5aLEoqUZYG/tZpBTC4GkrCljiiYPNHA2 y4JBszb4b1yvbbGHKX7zr2AKVz9ZBFl4ezwMYJWgxIscqkrn9VSMosHmYyce0dOz M6X4Sbdo+QW4oC28wF2/t/cRICVM0uIBsNfufmB9ByghFwCsq4hloHvDp9VsV/P5 01y+SbKoPsE7W7CpHCx3eYCVdxp5bwBI/ubAn3VdJRw8jFoIw+fq2fCsQdybrRjD Fy1Z84esnpghsCgUjWDrrTHfs9hR6QcsiaWrXc+NbVFFiE9kJ/dZcYkY1OHY0lj+ LwsTxEzboXv+DxLqdH9IPIRLvcAeqVg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:14 2026 by rpki-client